You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: static/api-specs/crd-api.md
+53Lines changed: 53 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -13,6 +13,41 @@ Package v1alpha1 contains API Schema definitions for the toolhive v1alpha1 API g
13
13
14
14
15
15
16
+
#### AuthzConfigRef
17
+
18
+
19
+
20
+
AuthzConfigRef defines a reference to authorization configuration
21
+
22
+
23
+
24
+
_Appears in:_
25
+
-[MCPServerSpec](#mcpserverspec)
26
+
27
+
| Field | Description | Default | Validation |
28
+
| --- | --- | --- | --- |
29
+
|`type`_string_| Type is the type of authorization configuration | configMap | Enum: [configMap inline] <br /> |
30
+
|`configMap`_[ConfigMapAuthzRef](#configmapauthzref)_| ConfigMap references a ConfigMap containing authorization configuration<br />Only used when Type is "configMap" |||
31
+
|`inline`_[InlineAuthzConfig](#inlineauthzconfig)_| Inline contains direct authorization configuration<br />Only used when Type is "inline" |||
32
+
33
+
34
+
#### ConfigMapAuthzRef
35
+
36
+
37
+
38
+
ConfigMapAuthzRef references a ConfigMap containing authorization configuration
39
+
40
+
41
+
42
+
_Appears in:_
43
+
-[AuthzConfigRef](#authzconfigref)
44
+
45
+
| Field | Description | Default | Validation |
46
+
| --- | --- | --- | --- |
47
+
|`name`_string_| Name is the name of the ConfigMap || Required: \{\} <br /> |
48
+
|`key`_string_| Key is the key in the ConfigMap that contains the authorization configuration | authz.json ||
49
+
50
+
16
51
#### ConfigMapOIDCRef
17
52
18
53
@@ -47,6 +82,23 @@ _Appears in:_
47
82
|`value`_string_| Value of the environment variable || Required: \{\} <br /> |
48
83
49
84
85
+
#### InlineAuthzConfig
86
+
87
+
88
+
89
+
InlineAuthzConfig contains direct authorization configuration
90
+
91
+
92
+
93
+
_Appears in:_
94
+
-[AuthzConfigRef](#authzconfigref)
95
+
96
+
| Field | Description | Default | Validation |
97
+
| --- | --- | --- | --- |
98
+
|`policies`_string array_| Policies is a list of Cedar policy strings || MinItems: 1 <br />Required: \{\} <br /> |
99
+
|`entitiesJson`_string_| EntitiesJSON is a JSON string representing Cedar entities |[]||
100
+
101
+
50
102
#### InlineOIDCConfig
51
103
52
104
@@ -174,6 +226,7 @@ _Appears in:_
174
226
|`podTemplateSpec`_[PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.27/#podtemplatespec-v1-core)_| PodTemplateSpec defines the pod template to use for the MCP server<br />This allows for customizing the pod configuration beyond what is provided by the other fields.<br />Note that to modify the specific container the MCP server runs in, you must specify<br />the `mcp` container name in the PodTemplateSpec. |||
175
227
|`resourceOverrides`_[ResourceOverrides](#resourceoverrides)_| ResourceOverrides allows overriding annotations and labels for resources created by the operator |||
176
228
|`oidcConfig`_[OIDCConfigRef](#oidcconfigref)_| OIDCConfig defines OIDC authentication configuration for the MCP server |||
229
+
|`authzConfig`_[AuthzConfigRef](#authzconfigref)_| AuthzConfig defines authorization policy configuration for the MCP server |||
0 commit comments